GET /api/auth?format=api
HTTP 200 OK Content-Type: application/json Vary: Accept Allow: GET, HEAD, OPTIONS